[Snort-users] SNORT and Razorback
paulb at ...4318...
Tue Mar 19 09:02:07 EST 2002
I have only been able to get Razorback to successfully work when I have set
the output of SNORT to log to syslog. Razorback doesn't seem to pick up any
events when I have output set to log to another file (which i prefer for
ease of reading). I have tried both alert_full and alert_fast...both don't
seem to trigger any response from razorback. Anyone able to get razorback
working when not logging to syslog?
More information about the Snort-users